Jump to content

System Fix Rogue


Recommended Posts

I have a client with System Fix on the machine that I'm having trouble getting rid of. I've booted in safe mode with networking and ran mbam, making sure it was up to date. It spotted 6 infection (all registry keys) and I removed them, but the issue resurfaces on reboot.

Here are my DDS files:

DDS.txt

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 7.0.5730.13

Run by Mwarren at 11:30:16 on 2011-12-16

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2294.1900 [GMT -8:00]

.

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\Program Files\DesktopAuthority\DaMaint.exe

C:\Program Files\DesktopAuthority\DesktopAuthority.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Panda Software\Panda Administrator 3\Pav_Agent\Pagent.exe

C:\Program Files\Panda Software\Panda Administrator 3\Scheduler\pavsched.exe

C:\Program Files\Panda Software\Panda Administrator 3\Pav_Agent\pagentwd.exe

C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\SysAid\IliAS.exe

C:\Program Files\ScriptLogic\Desktop Authority\Client Files\8.12.7\SLClient.exe

C:\WINDOWS\system32\wuauclt.exe

c:\windows\system32\slinstall.exe

C:\Program Files\ScriptLogic\Desktop Authority\Client Files\8.12.7\CBM\ScriptLogic.CBM.Agent.exe

C:\Program Files\Canon\CAL\CALMAIN.exe

C:\Program Files\DesktopAuthority\RMGui.exe

C:\PROGRA~1\SCRIPT~1\DESKTO~1\CLIENT~1\812~1.7\SLAgent.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\ScriptLogic\Desktop Authority\Client Files\8.12.7\CBM\ScriptLogic.CBM.UserExperience.exe

C:\WINDOWS\system32\rundll32.exe

C:\Documents and Settings\All Users\Application Data\YRwBMqvuhmE.exe

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\rundll32.exe

C:\Documents and Settings\All Users\Application Data\rLNROuKwEHaS.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\attrib.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.msn.com

uSearch Page = hxxp://www.google.com

uSearch Bar = hxxp://www.google.com

uInternet Settings,ProxyServer = 10.0.0.10:8080

uInternet Settings,ProxyOverride = 10.0.;<local>

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

mRun: [igfxtray] c:\windows\system32\igfxtray.exe

mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe

mRun: [igfxpers] c:\windows\system32\igfxpers.exe

mRun: [DesktopAuthority User Experience] "c:\program files\scriptlogic\desktop authority\client files\8.12.7\cbm\ScriptLogic.CBM.UserExperience.exe"

mRun: [synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 10.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [gmhvjh] rundll32 c:\docume~1\execchef\applic~1\micros~1\protect\ibjuk.g, tifh

mRun: [YRwBMqvuhmE.exe] c:\documents and settings\all users\application data\YRwBMqvuhmE.exe

mRun: [lkktxq] rundll32 c:\docume~1\execchef\applic~1\micros~1\protect\bpbw.il, jvpx

mRun: [blhgupw] rundll32 c:\docume~1\execchef\applic~1\micros~1\protect\osxdiy.e, wsvg

mRun: [rLNROuKwEHaS.exe] c:\documents and settings\all users\application data\rLNROuKwEHaS.exe

uPolicies-explorer: NoDesktop = 1 (0x1)

uPolicies-system: HideLogonScripts = 0 (0x0)

uPolicies-system: NoSecCPL = 1 (0x1)

mPolicies-explorer: NoWelcomeScreen = 1 (0x1)

mPolicies-system: HideLogonScripts = 0 (0x0)

mPolicies-system: MaxGPOScriptWait = 3600 (0xe10)

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1293051382921

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1294180618033

DPF: {8569D715-FF88-44BA-8D1D-AD3E59543DDE} - hxxp://www.emorrison.com/NGen/ActiveReport/arview2.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: DhcpNameServer = 10.0.0.7 10.0.0.15

TCP: Interfaces\{A627D2D7-3DB8-4DEC-8E52-F363B6358E83} : NameServer = 10.0.0.7,10.0.0.15

TCP: Interfaces\{A627D2D7-3DB8-4DEC-8E52-F363B6358E83} : DhcpNameServer = 10.0.0.7 10.0.0.15

Notify: igfxcui - igfxdev.dll

AppInit_DLLs: DAinit.dll

.

============= SERVICES / DRIVERS ===============

.

R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2010-12-23 36744]

R2 DAInfo;DAInfo;c:\program files\desktopauthority\DAinfo.sys [2010-12-23 12168]

R2 DAMaint;DA Remote Management Maintenance Service;c:\program files\desktopauthority\DAMaint.exe [2010-12-23 85000]

R2 DAtf;DAtf;c:\program files\desktopauthority\DAtf.sys [2010-12-23 11144]

R2 DesktopAuthority;DA Remote Management Service;c:\program files\desktopauthority\DesktopAuthority.exe [2010-12-23 1364488]

R2 PAVAGENTE;Panda AdminSecure Communications Agent;c:\program files\panda software\panda administrator 3\pav_agent\Pagent.exe [2010-12-23 468224]

R2 PavAtScheduler;Panda AdminSecure Scheduler;c:\program files\panda software\panda administrator 3\scheduler\pavsched.exe [2010-12-23 255232]

R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2010-12-23 172168]

R2 PavPrSrv;Panda Process Protection Service;c:\program files\common files\panda software\pavshld\PavPrSrv.exe [2010-12-23 62768]

R2 ScriptLogic CBM Service;ScriptLogic CBM Service;c:\program files\scriptlogic\desktop authority\client files\8.12.7\cbm\ScriptLogic.CBM.Agent.exe [2011-4-1 431616]

R2 SLClient;ScriptLogic Service;c:\program files\scriptlogic\desktop authority\client files\8.12.7\SLClient.exe [2011-4-1 557920]

R2 SLInstall;Desktop Authority Client Provisioning Service;c:\windows\system32\slinstall.exe [2011-11-11 557920]

R3 DAmirr;DAmirr;c:\windows\system32\drivers\DAmirr.sys [2010-12-23 9352]

S0 cerc6;cerc6; [x]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-4-18 39984]

S3 PavReport;Panda Antivirus Report Service;c:\program files\panda software\panda administrator 3\pavreport\PavReport.exe [2010-12-23 926976]

.

=============== Created Last 30 ================

.

2011-12-16 17:20:48 373760 ---ha-w- c:\documents and settings\all users\application data\MY6hnbK6iJ8v5o.exe

2011-12-16 09:34:17 467968 ---ha-w- c:\documents and settings\all users\application data\rLNROuKwEHaS.exe

2011-12-16 02:14:23 451720 ---ha-w- c:\documents and settings\all users\application data\YRwBMqvuhmE.exe

.

==================== Find3M ====================

.

2011-11-23 13:25:32 1859584 ----a-w- c:\windows\system32\win32k.sys

2011-11-01 16:07:10 1288704 ----a-w- c:\windows\system32\ole32.dll

2011-10-31 23:43:21 832512 ----a-w- c:\windows\system32\wininet.dll

2011-10-31 23:43:21 78336 ----a-w- c:\windows\system32\ieencode.dll

2011-10-31 23:43:21 1830912 ------w- c:\windows\system32\inetcpl.cpl

2011-10-31 23:43:20 17408 ----a-w- c:\windows\system32\corpol.dll

2011-10-28 05:31:48 33280 ----a-w- c:\windows\system32\csrsrv.dll

2011-10-25 13:37:08 2148864 ----a-w- c:\windows\system32\ntoskrnl.exe

2011-10-25 12:52:02 2027008 ----a-w- c:\windows\system32\ntkrnlpa.exe

2011-10-22 18:13:24 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-10-18 11:13:22 186880 ----a-w- c:\windows\system32\encdec.dll

2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll

2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll

2011-09-26 18:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll

2011-09-26 18:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll

2011-09-26 18:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll

.

============= FINISH: 11:30:39.81 ===============

Attach.txt

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 12/22/2010 12:28:05 PM

System Uptime: 12/16/2011 11:27:13 AM (0 hours ago)

.

Motherboard: Dell Inc. | | 0JC474

Processor: Intel® Pentium® 4 CPU 2.80GHz | Microprocessor | 2793/800mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 149 GiB total, 130.046 GiB free.

D: is CDROM ()

E: is Removable

F: is NetworkDisk (NTFS) - 437 GiB total, 234.668 GiB free.

G: is NetworkDisk (NTFS) - 136 GiB total, 15.003 GiB free.

H: is NetworkDisk (NTFS) - 136 GiB total, 15.003 GiB free.

I: is NetworkDisk (NTFS) - 437 GiB total, 234.668 GiB free.

N: is NetworkDisk (NTFS) - 410 GiB total, 215.814 GiB free.

T: is NetworkDisk (NTFS) - 385 GiB total, 363.68 GiB free.

V: is NetworkDisk (NTFS) - 400 GiB total, 385.401 GiB free.

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Description: PCI Simple Communications Controller

Device ID: PCI\VEN_14F1&DEV_2F20&SUBSYS_200F14F1&REV_00\4&10BD256C&0&10F0

Manufacturer:

Name: PCI Simple Communications Controller

PNP Device ID: PCI\VEN_14F1&DEV_2F20&SUBSYS_200F14F1&REV_00\4&10BD256C&0&10F0

Service:

.

==== System Restore Points ===================

.

RP264: 9/17/2011 5:44:01 PM - System Checkpoint

RP265: 9/18/2011 5:45:09 PM - System Checkpoint

RP266: 9/19/2011 9:00:03 PM - System Checkpoint

RP267: 9/20/2011 9:24:55 PM - System Checkpoint

RP268: 9/21/2011 11:12:54 PM - System Checkpoint

RP269: 9/23/2011 6:26:45 AM - System Checkpoint

RP270: 9/24/2011 6:42:58 AM - System Checkpoint

RP271: 9/25/2011 11:24:24 AM - System Checkpoint

RP272: 9/26/2011 11:28:31 AM - System Checkpoint

RP273: 9/27/2011 12:27:08 PM - System Checkpoint

RP274: 9/28/2011 1:24:03 PM - System Checkpoint

RP275: 9/29/2011 1:48:03 PM - System Checkpoint

RP276: 9/30/2011 4:42:18 PM - System Checkpoint

RP277: 10/1/2011 5:10:05 PM - System Checkpoint

RP278: 10/2/2011 6:12:50 PM - System Checkpoint

RP279: 10/3/2011 7:36:36 PM - System Checkpoint

RP280: 10/5/2011 9:13:38 AM - System Checkpoint

RP281: 10/6/2011 9:22:51 AM - System Checkpoint

RP282: 10/7/2011 9:33:08 AM - System Checkpoint

RP283: 10/8/2011 9:55:17 AM - System Checkpoint

RP284: 10/9/2011 12:05:58 PM - System Checkpoint

RP285: 10/11/2011 6:54:09 AM - System Checkpoint

RP286: 10/12/2011 7:06:11 AM - System Checkpoint

RP287: 10/13/2011 7:44:02 AM - System Checkpoint

RP288: 10/14/2011 8:57:26 AM - System Checkpoint

RP289: 10/15/2011 9:43:58 AM - System Checkpoint

RP290: 10/16/2011 10:43:57 AM - System Checkpoint

RP291: 10/17/2011 11:01:37 AM - System Checkpoint

RP292: 10/18/2011 11:42:50 AM - System Checkpoint

RP293: 10/19/2011 11:45:03 AM - System Checkpoint

RP294: 10/20/2011 11:55:51 AM - System Checkpoint

RP295: 10/21/2011 11:56:49 AM - System Checkpoint

RP296: 10/22/2011 12:02:32 PM - System Checkpoint

RP297: 10/23/2011 3:00:26 AM - Software Distribution Service 3.0

RP298: 10/24/2011 3:00:36 AM - Software Distribution Service 3.0

RP299: 10/25/2011 3:10:31 AM - System Checkpoint

RP300: 10/26/2011 3:15:00 AM - System Checkpoint

RP301: 10/27/2011 4:15:00 AM - System Checkpoint

RP302: 10/28/2011 5:14:54 AM - System Checkpoint

RP303: 10/29/2011 6:14:53 AM - System Checkpoint

RP304: 10/30/2011 7:14:53 AM - System Checkpoint

RP305: 10/31/2011 8:14:50 AM - System Checkpoint

RP306: 11/1/2011 9:05:24 AM - System Checkpoint

RP307: 11/2/2011 10:12:20 AM - System Checkpoint

RP308: 11/3/2011 12:38:13 PM - System Checkpoint

RP309: 11/4/2011 2:28:58 PM - System Checkpoint

RP310: 11/5/2011 2:58:18 PM - System Checkpoint

RP311: 11/6/2011 3:57:59 PM - System Checkpoint

RP312: 11/7/2011 4:17:23 PM - System Checkpoint

RP313: 11/8/2011 7:01:33 PM - System Checkpoint

RP314: 11/9/2011 3:00:16 AM - Software Distribution Service 3.0

RP315: 11/10/2011 3:58:06 AM - System Checkpoint

RP316: 11/11/2011 3:00:15 AM - Software Distribution Service 3.0

RP317: 11/11/2011 7:00:34 AM - Printer Driver DA Remote Management Printer Driver Installed

RP318: 11/12/2011 7:12:00 AM - System Checkpoint

RP319: 11/13/2011 7:18:25 AM - System Checkpoint

RP320: 11/14/2011 7:32:24 AM - System Checkpoint

RP321: 11/15/2011 7:33:32 AM - System Checkpoint

RP322: 11/16/2011 9:10:42 AM - System Checkpoint

RP323: 11/17/2011 9:17:01 AM - System Checkpoint

RP324: 11/18/2011 10:24:42 AM - System Checkpoint

RP325: 11/19/2011 10:51:44 AM - System Checkpoint

RP326: 11/20/2011 11:43:01 AM - System Checkpoint

RP327: 11/21/2011 12:37:41 PM - System Checkpoint

RP328: 11/22/2011 1:50:18 PM - System Checkpoint

RP329: 11/23/2011 5:50:57 PM - System Checkpoint

RP330: 11/24/2011 6:26:58 PM - System Checkpoint

RP331: 11/25/2011 7:26:56 PM - System Checkpoint

RP332: 11/27/2011 1:59:32 PM - System Checkpoint

RP333: 11/28/2011 7:34:58 PM - System Checkpoint

RP334: 11/29/2011 9:07:31 PM - System Checkpoint

RP335: 11/30/2011 9:32:03 PM - System Checkpoint

RP336: 12/1/2011 9:33:06 PM - System Checkpoint

RP337: 12/2/2011 10:31:59 PM - System Checkpoint

RP338: 12/3/2011 11:31:56 PM - System Checkpoint

RP339: 12/5/2011 12:31:55 AM - System Checkpoint

RP340: 12/6/2011 9:33:19 AM - System Checkpoint

RP341: 12/7/2011 11:27:35 AM - System Checkpoint

RP342: 12/8/2011 12:03:59 PM - System Checkpoint

RP343: 12/9/2011 12:39:21 PM - System Checkpoint

RP344: 12/10/2011 12:55:57 PM - System Checkpoint

RP345: 12/11/2011 1:38:08 PM - System Checkpoint

RP346: 12/12/2011 1:39:12 PM - System Checkpoint

RP347: 12/13/2011 2:46:28 PM - System Checkpoint

RP348: 12/14/2011 3:53:45 PM - System Checkpoint

RP349: 12/15/2011 3:00:24 AM - Software Distribution Service 3.0

RP350: 12/16/2011 3:26:33 AM - System Checkpoint

.

==== Installed Programs ======================

.

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X

Canon Camera Access Library

Canon Camera Support Core Library

Canon Camera Window DC_DV 5 for ZoomBrowser EX

Canon Camera Window DC_DV 6 for ZoomBrowser EX

Canon Camera Window MC 6 for ZoomBrowser EX

Canon G.726 WMP-Decoder

Canon MovieEdit Task for ZoomBrowser EX

Canon RAW Image Task for ZoomBrowser EX

Canon RemoteCapture Task for ZoomBrowser EX

Canon Utilities EOS Utility

Canon Utilities PhotoStitch

Canon Utilities ZoomBrowser EX

ExpertAssist

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows XP (KB2443685)

Hotfix for Windows XP (KB2570791)

Hotfix for Windows XP (KB2633952)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB961118)

Intel® Graphics Media Accelerator Driver

Intel® PRO Network Connections Drivers

Java 6 Update 26

K-Lite Codec Pack 7.0.0 (Full)

Malwarebytes' Anti-Malware

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft National Language Support Downlevel APIs

Microsoft Office 2007 Service Pack 2 (SP2)

Microsoft Office Access MUI (English) 2007

Microsoft Office Access Setup Metadata MUI (English) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (English) 2007

Microsoft Office Groove MUI (English) 2007

Microsoft Office Groove Setup Metadata MUI (English) 2007

Microsoft Office InfoPath MUI (English) 2007

Microsoft Office OneNote MUI (English) 2007

Microsoft Office Outlook MUI (English) 2007

Microsoft Office PowerPoint MUI (English) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

Microsoft Office Publisher MUI (English) 2007

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Word MUI (English) 2007

Microsoft Silverlight

Microsoft Software Update for Web Folders (English) 12

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Pervasive System Analyzer

Pervasive.SQL 9 SP2 Client for Windows (9.5)

ScriptLogic Desktop Authority: Computer Agent

Security Update for 2007 Microsoft Office System (KB2288621)

Security Update for 2007 Microsoft Office System (KB2288931)

Security Update for 2007 Microsoft Office System (KB2345043)

Security Update for 2007 Microsoft Office System (KB2553089)

Security Update for 2007 Microsoft Office System (KB2553090)

Security Update for 2007 Microsoft Office System (KB2584063)

Security Update for 2007 Microsoft Office System (KB969559)

Security Update for 2007 Microsoft Office System (KB976321)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office Access 2007 (KB979440)

Security Update for Microsoft Office Groove 2007 (KB2552997)

Security Update for Microsoft Office InfoPath 2007 (KB2510061)

Security Update for Microsoft Office InfoPath 2007 (KB979441)

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition

Security Update for Microsoft Office system 2007 (972581)

Security Update for Microsoft Office system 2007 (KB974234)

Security Update for Microsoft Office Visio Viewer 2007 (KB973709)

Security Update for Microsoft Office Word 2007 (KB2344993)

Security Update for Microsoft Windows (KB2564958)

Security Update for Windows Internet Explorer 7 (KB2360131)

Security Update for Windows Internet Explorer 7 (KB2416400)

Security Update for Windows Internet Explorer 7 (KB2544521)

Security Update for Windows Internet Explorer 7 (KB2586448)

Security Update for Windows Internet Explorer 7 (KB2618444)

Security Update for Windows Internet Explorer 7 (KB982381)

Security Update for Windows Media Player (KB2378111)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB975558)

Security Update for Windows Media Player (KB978695)

Security Update for Windows XP (KB2079403)

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2121546)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2259922)

Security Update for Windows XP (KB2286198)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2296199)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2412687)

Security Update for Windows XP (KB2416400)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2436673)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476490)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2479943)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2507618)

Security Update for Windows XP (KB2507938)

Security Update for Windows XP (KB2508272)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2510581)

Security Update for Windows XP (KB2535512)

Security Update for Windows XP (KB2536276-v2)

Security Update for Windows XP (KB2544893-v2)

Security Update for Windows XP (KB2544893)

Security Update for Windows XP (KB2562937)

Security Update for Windows XP (KB2566454)

Security Update for Windows XP (KB2567053)

Security Update for Windows XP (KB2567680)

Security Update for Windows XP (KB2570222)

Security Update for Windows XP (KB2570947)

Security Update for Windows XP (KB2592799)

Security Update for Windows XP (KB2618451)

Security Update for Windows XP (KB2619339)

Security Update for Windows XP (KB2620712)

Security Update for Windows XP (KB2624667)

Security Update for Windows XP (KB2633171)

Security Update for Windows XP (KB2639417)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923789)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB954459)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB971961)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975562)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB980195)

Security Update for Windows XP (KB980232)

Security Update for Windows XP (KB980436)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981349)

Security Update for Windows XP (KB981852)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982214)

Security Update for Windows XP (KB982665)

SigmaTel Audio

SysAid Agent version 8.1.01

TrimTrax Version 1.0

TrimTrax Version 1.47

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft Office 2007 suites (KB2596651) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596789) 32-Bit Edition

Update for Microsoft Office 2007 System (KB2539530)

Update for Microsoft Office Excel 2007 (KB2596596) 32-Bit Edition

Update for Microsoft Office OneNote 2007 (KB980729)

Update for Microsoft Office Outlook 2007 (KB2583910)

Update for Outlook 2007 Junk Email Filter (KB2596560)

Update for Windows XP (KB2141007)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2467659)

Update for Windows XP (KB2541763)

Update for Windows XP (KB2616676-v2)

Update for Windows XP (KB2641690)

Update for Windows XP (KB898461)

Update for Windows XP (KB951978)

Update for Windows XP (KB955759)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB971737)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

WebFldrs XP

Windows Genuine Advantage Notifications (KB905474)

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 7

.

==== Event Viewer Messages From Past Week ========

.

12/16/2011 9:45:15 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Fips intelppm ShldDrv

12/16/2011 9:41:21 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss ShldDrv Tcpip

12/16/2011 9:41:21 AM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.

12/16/2011 9:41:21 AM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.

12/16/2011 9:41:21 AM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.

12/16/2011 9:41:21 AM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.

12/16/2011 9:41:21 AM, error: Service Control Manager [7001] - The DA Remote Management Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.

12/16/2011 9:41:19 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

12/16/2011 9:41:13 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}

12/16/2011 9:41:07 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

12/16/2011 10:19:38 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde

12/16/2011 10:18:10 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.

12/15/2011 7:40:57 PM, error: NETLOGON [5776] - Failed to create/open file \system32\config\netlogon.ftl with the following error: Access is denied.

.

==== End Of File ===========================

Thank you for all of your help :)

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.